CVE-2022-32777

An information disclosure vulnerability exists in the cookie functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. The session cookie and the pass cookie miss the HttpOnly flag, making them accessible via JavaScript. The session cookie also misses the secure flag, which allows the session cookie to be leaked over non-HTTPS connections. This could allow an attacker to steal the session cookie via crafted HTTP requests.This vulnerabilty is for the session cookie which can be leaked via JavaScript.

• CWE-732

• https://github.com/WWBN/AVideo/blob/e04b1cd7062e16564157a82bae389eedd39fa088/updatedb/updateDb.v12.0.sqlThird Party Advisory
• https://talosintelligence.com/vulnerability_reports/TALOS-2022-1542Third Party Advisory
• https://github.com/WWBN/AVideo/blob/e04b1cd7062e16564157a82bae389eedd39fa088/updatedb/updateDb.v12.0.sqlThird Party Advisory
• https://talosintelligence.com/vulnerability_reports/TALOS-2022-1542Third Party Advisory

Published

Aug 22, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-32771A cross-site scripting (xss) vulnerability exists in the foo…6.1
• CVE-2022-32772A cross-site scripting (xss) vulnerability exists in the foo…6.1
• CVE-2022-32773An OS command injection vulnerability exists in the XCMD doD…9.8
• CVE-2022-32774A use-after-free vulnerability exists in the JavaScript engi…7.8
• CVE-2022-32775An integer overflow vulnerability exists in the web interfac…8.8
• CVE-2022-32776Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerabili…4.8
• CVE-2022-32778An information disclosure vulnerability exists in the cookie…7.5
• CVE-2022-32779Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2022-3278NULL Pointer Dereference in GitHub repository vim/vim prior …5.5
• CVE-2022-32781This issue was addressed by enabling hardened runtime. This …4.4
• CVE-2022-32782This issue was addressed by enabling hardened runtime. This …4.4
• CVE-2022-32783A logic issue was addressed with improved checks. This issue…5.5